security engineer in cloud security

Enfint; Málaga; Presencial; EUR 70.000 - 100.000; Jornada completa

Descripción de la vacante

EPAM ищет опытного инженера по безопасности для разработки и поддержки облачных и инфраструктурных платформ. Ваша работа охватит архитектуру, внедрение и операцию безопасных решений с высокой доступностью и видимыми результатами.

Требуется 5+ лет опыта в области кибербезопасности, владение инструментами IaC (Terraform/Pulumi/Ansible) и знание AWS/Azure/GCP. Будет предпочтителен опыт работы с CSPM/CNAPP и CI/CD безопасностью.

Formación

• Bachelor’s or Master’s degree in Computer Science, Engineering, or related field, or equivalent experience.
• 5+ years of experience in security engineering, platform engineering, or related cloud-focused roles.
• Hands-on experience with cloud security across AWS, Azure, and GCP, and with CSPM/CNAPP platforms.
• Strong understanding of networking, secure systems design, and infrastructure security principles.
• Proficiency in Python and/or PowerShell scripting or programming.
• Familiarity with Windows and Linux environments for operational security management.
• Knowledge of CI/CD security, IaC, and PaC practices using Terraform or similar tools.
• Strong operational mindset with skills in monitoring, alerting, and incident response.
• Comfort working with AI-driven development and security analysis tools.
• Excellent communication skills and ability to document and present technical solutions effectively.
• Nice to have: Terraform, Pulumi, Ansible, or OPA frameworks, SBOMs, artifact signing, container security, Wiz, Checkov, etc.

Responsabilidades

• Architect, implement, and operate security platforms with high availability and measurable outcomes.
• Enhance and integrate security solutions across AWS, Azure, and GCP environments.
• Improve existing controls through automation, IaC/PaC, and self-service capabilities.
• Implement and manage CSPM/CNAPP solutions such as Wiz to monitor and reduce cloud risk.
• Support secure software delivery pipelines, including dependency scanning, artifact validation, and secrets management.
• Develop Infrastructure as Code using Terraform, Pulumi, or Ansible for automated provisioning.
• Apply Policy as Code frameworks such as OPA and Sentinel for enforcement and compliance automation.
• Build and manage observability components for threat detection, alerting, and incident response.
• Collaborate with Security Operations, DevOps, and engineering teams to maintain a robust security posture.
• Use AI-assisted tools to accelerate automation, security analysis, and operational documentation.

Conocimientos

Cloud security

Python scripting

Infrastructure security

CI/CD security

Automation

Documentation

Team collaboration

Educación

Bachelor's or Master’s degree in CS/Engineering

Herramientas

Terraform

Pulumi

Ansible

Wiz

Checkov

OPA

Sentinel

Descripción del empleo

Описание:

EPAM provides enterprise software products, open source solutions, and accelerators through EPAM SolutionsHub.

Задачи:

• Architect, implement, and operate security platforms and controls with high availability and measurable outcomes;
• Enhance and integrate security solutions across AWS, Azure, and GCP environments;
• Improve existing controls through automation, IaC/PaC, and self-service capabilities;
• Implement and manage CSPM/CNAPP solutions such as Wiz to monitor and reduce cloud risk;
• Support secure software delivery pipelines, including dependency scanning, artifact validation, and secrets management;
• Develop Infrastructure as Code using Terraform, Pulumi, or Ansible for automated provisioning;
• Apply Policy as Code frameworks such as OPA and Sentinel for enforcement and compliance automation;
• Build and manage observability components for threat detection, alerting, and incident response;
• Collaborate with Security Operations, DevOps, and engineering teams to maintain a robust security posture;
• Use AI-assisted tools to accelerate automation, security analysis, and operational documentation.

Требования:

• Bachelor’s or Master’s degree in Computer Science, Engineering, or a related field, or equivalent experience;
• 5+ Years of experience in security engineering, platform engineering, or related cloud-focused roles;
• Hands-on experience with cloud security across AWS, Azure, and GCP, and with CSPM/CNAPP platforms;
• Strong understanding of networking, secure systems design, and infrastructure security principles;
• Proficiency in Python and/or PowerShell scripting or programming;
• Familiarity with Windows and Linux environments for operational security management;
• Knowledge of CI/CD security, IaC, and PaC practices using Terraform or similar tools;
• Strong operational mindset with skills in monitoring, alerting, and incident response;
• Comfort working with AI-driven development and security analysis tools;
• Excellent communication skills and ability to document and present technical solutions effectively;
• Nice to have: Deep expertise in Terraform, Pulumi, Ansible, or OPA frameworks, experience with software supply chain security measures including SBOMs, artifact signing, and dependency risk checks, familiarity with containerization and Kubernetes security controls, knowledge of cloud-native security services and platform tools such as Wiz and Checkov, exposure to IDS, IPS, DLP, EDR, firewalls, and file integrity monitoring, strong Python development background focused on automation and orchestration, experience creating self-service security solutions for engineering enablement, demonstrated use of AI-assisted engineering tools to streamline workflows and security testing.

Условия:

No conditions specified